Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
20-11-2023 04:57
General
-
Target
13b4324a4277897b0927ae1244bd36610e6aa9c97947c27fc70f50382ddebafa.exe
-
Size
1.6MB
-
MD5
a2e4918b3f4eb57317765b2879a1430d
-
SHA1
67f88faee16b6c502a039779b1f657006ae3a09a
-
SHA256
13b4324a4277897b0927ae1244bd36610e6aa9c97947c27fc70f50382ddebafa
-
SHA512
2768bf6ec283021a97d0bc91d1e5473122c07b185d69d2746e8e61de38ac086ca79e83091b5d7c2e210b40194f8c4afc1571c01f8212cb4c0279a04e2e652f44
-
SSDEEP
24576:a49BS8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:aYSgDUYmvFur31yAipQCtXxc0H
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\13b4324a4277897b0927ae1244bd36610e6aa9c97947c27fc70f50382ddebafa.exe"C:\Users\Admin\AppData\Local\Temp\13b4324a4277897b0927ae1244bd36610e6aa9c97947c27fc70f50382ddebafa.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD5768ff7057d9eaefaafecaccbac0c98d5
SHA1af198778ca234eaf3780a463e2e5f779433574c0
SHA256f5111279328569c94e96453d9adbcc22731e882bfc2346239c79aa24fefdbfc8
SHA512ec8e0e8ef00d3101b52bee440b5a581c9028f04fc04d47108bb2f2ab33b46af7f1932e6c61b72d37a298b8d36b45235e21486b86788985cd1a5c3855bf3ae85c
-
Filesize
1.6MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB